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IN THE CLAIMS: 

1. (currently amended) A method for filtering packets received from aft a e xt e rnal 
network using a programmable logic device-based packet filtering system ("PLD 
system"), comprising the steps of: 

operating the PLD system in accordance with first configuration data, wherein in 
accordance with the first configuration data, the PLD system receives filt e rs packets 
including at least first packets from the e xternal networ k, processes the first packets in 
accordance with a filtering operation, and conditionally transmits the processed first 
packets to an ele ctronic connection coupled to the PLD system, wherein the PLD system 
processes the first packets in accordance with a first set of filtering rules based on the first 
configuration data; 

receiving second configuration data for the PLD system, wherein the second 
configuration d ata is selectively received by the PLD system based on identification 
information fo r the PLD system, wherein the second configuration data are different from 
the first configuration data: 

receiving q uoor input to tho PLD syotom, wh e rein in r e oponse to th e us e r input t he 
P fcD syotom operates to receive pQckoto from a computing system coupled an internal 
n e twork; 

pending at least a first packet from tho computing system to tho PLD system ovor 
th e int e rnal network - 

in roaponoo to the firot packet, oonding at least a oocond packet from th e PLD 
syotom to tho computing oyotcm ovor tho internal n e twork, whoroin th e oecond packe t 
contains information identifying the PLD system and aloo information indicative of ono 
or mor e commando in accordance with tho protocol, whoroin the PLD system operates in 
accordance with tho on e or more commands -' 

in response to tho second packet, ponding at least a third paokot from th e 
c o mputing syotom to tho PLD oyotom, wh e r e in tho third packet compriGoo a command in 
accordance with tho protoool and containo at loaot s e cond configuration data for tho PLD 
syst e m; 

loading programming the second configuration into the PLD system; and 
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operating the PLD system in accordance with the second configuration data, 
wherein , in accordance with the second configuration data, the PT T) syst em receives 
packets including at least second packets from the network, processes the second packets 
in accordance with a filtering operation, and conditionally transmits the processed second 
packets to the electronic connection coupled to the PT D sys tem, wherein the PLD system 
filters processes the second packets from th e e xt e rnal network in accordance with a 
second set of filtering rules based on the second configuration data. 

2. (currently amended) The method of claim 1, further comprising the step of, 
after the second configuration data third - pack e t are is received by the PLD system, saving 
the second configuration data contain e d in th e third pack e t in non- volatile memory of the 
system. 

3. (original) The method of claim 2, wherein the non-volatile memory comprises 
Flash memory, electrically erasable and programmable read only memory or battery- 
backed-up random access memory. 

4. (currently amended) A method for filtering packets received from a network 
using a programmable logic device-based packet filtering syste m f "PT T> system"), 
wherein the P T D syste m is one of a plurality of PLD systems coupled to receive packets 
from the network, comprising the steps of: 

operating the PLD system in accordance with first configuration data, wherein in 
accordance with the first configuration data, the PLD system receives packets including at 
least first packets from the network, processes the first packets in accordance with a 
filtering operation, and conditionally transmits the processed first packets to an electronic 
connection coupled to the PLD system, wherein the PLD system processes the first 
packets in accordance with a first set of filtering rules based on the first configuration 
data; 

receiving second configuration data for the PLD system, wherein the second 
configuration data is selectively received bv the PLD system via one or more second 
packets from a computing system based on identification information for the PLD system, 
wherein the second configuration data are different from the first configuration data: 

programming the second configuration data into the PLD system: and 
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npgiraHnp; th<* T ) system in accordance with the second configuration data, 
wherein, in accordance with the second configuration data, the PI D syst em receives 
packets including at least third packets from the network, processes the third packets in 
accordance with a filtering operation, and conditionally transmits the processed third 
packets to the electronic connection coupled to the PLD system, wherein the PLD system 
processes the third packets in accordance with a second set of filtering rules based on the 
second configuration data: 

Th e m e thod of claim 1, wherein Q - plurality of third pack e to are r e c e ived by the PL D 
syst e m, wh e r e in, after receiving each of the one or more second third packets, the PLD 
system sends at least a fourth packet to the computing system over the network, wherein 
the each fourth paokoto oaoh acknowl e dg e packet acknowledges receipt of a 
corresponding one of the third one or more second packets. 

5. (currently amended) The method of claim 4, wherein after receiving each of 
the third one or more second packets, the PLD system saves second configuration data 
from the thifd one or more second packets in non- volatile memory ef coupled to the PLD 
system. 

6. (currently amended) The method of claim 5, wherein the PLD system saves the 
second configuration data in the non-volatile memory ef coupled to the PLD system from 
each of the third one or more second packets prior to sending each of th e fourth packets 
fourth packet . 

7. (currently amended) The method of claim 5, wherein, after receipt by the 
computing system of a fourth packet that acknowledges receipt by the PLD system of a 
final third second packet, the computing system sends at least a fifth packet to the PLD 
system, wherein, in response to the fifth packet, the PLD system saves one or more data 
indicating that all of the second configuration data has been received and stored in the 
non- volatile memory. 

8. (currently amended) The method of claim 14, wherein the second 
configuration data is loaded into the PLD system in response to a user command from a 
user. 
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9. (original) The method of claim 8, wherein the user command comprises a 
command input by a switch. 

10. (original) The method of claim 9, wherein the switch comprises a physical 
switch on the PLD system. 

11. (original) The method of claim 8, wherein the user command comprises a 
command entered via the computing system. 

12. (currently amended) The method of claim 4- 4, wherein one or more display 
devices provide visual feedback of the status of the PLD system. 

13. (original) The method of claim 12, wherein the one or more display devices 
comprise one or more LEDs. 

14. (original) The method of claim 12, wherein the one or more display devices 
comprise a liquid crystal display. 

15. (currently amended) The method of claim i 4, wherein the PLD system 
provides audio feedback indicative of the status of the PLD system. 

16. (original) The method of claim 12, wherein at least one LED indicates that the 
step of loading the second configuration data into the PLD system is in process. 

17. (currently amended) The method of claim i 4, wherein the PLD system 
processes packets sent from the computing system in order to determine if the packets 
sent from the computing system contain one or more commands to which the PT .D system 
is responsive . 

18. (currently amended) The method of claim 4- 17, wherein the PLD system 
extracts one or more commands to which the PLD system is responsive in accordance 
with the protocol from the packets sent from the computing system. 

19. (currently amended) The method of claim 4- 19, wher e in th e s e cond pack e t 
includes a version id e ntifi e r for th e PLD system wherein the step of receiving second 
configuration data for the PLD system sent from the computing system is selectively 
performed based on identification information for the PLD system provided from the 
PLD system to the computing system . 

20. (currently amended) The method of claim ± 19 , wherein the second paokot 
containo information that id e ntifi e s identification information is used to determine an 
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identification of the second configuration data that are to be received bv the PUD system a 
plurality of commands in accordanc e with th e protocol to which tho PLD syst e m 

noyuuuji 

21. (currently amended) The method of claim 1 , wherein tho oooond pack e t 
contains information that is indicative of a location coupl e d to tho network, wh e rein th e 
location contains information that id e ntifi e s a plurality of commands in accordanc e with 
the protocol to which the PLD syst e m r e sponds the second configuration data are stored 
in a Location remote from the PT T) system. 

22. (original) The method of claim 21, wherein the location comprises storage 
coupled to the computing system. 

23. (original) The method of claim 21, wherein the location comprises storage on 
a second network, wherein the computing system accesses the storage via the second 
network, 

24. (currently amended) The method of claim 23, wherein the information that is 
indicative of tho location compris es is identified bv an address of a node on the second 
network. 

25. (original) The method of claim 23, wherein the second network comprises an 
Internet network. 

26. (currently amended) The method of claim 25, wherein the information that is 
indicative of the location comprises a URL. 

27. (currently amended) The method of claim 4- 14, wherein the plurality of PLD 
systems collectively respond to a plurality of commands that include one or more first 
commands to which the PLD system responds and also include one or more second 
commands to which the PLD system responds. 

28. (original) The method of claim 27, wherein the first commands comprise core 
commands to which at least a second PLD system also responds. 

29. (original) The method of claim 28, wherein the second commands comprise 
custom commands to which the second PLD system does not respond. 

30. (original) The method of claim 1, wherein the network comprises a local area 
network. 
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31. (original) The method of claim 1, wherein the network comprises an 
Ethernet-based network. 

32. (currently amended) The method of claim -I- 4, wherein at least certain of the 
first, second or third packets comprise UDP packets. 

33. (currently amended) The method of claim 4- 4, wherein at least certain of the 
first, second or third packets comprise TCP packets. 

34. (currently amended) The method of claim + 4, wherein at least certain of the 
first, second or third packets comprise Ethernet packets. 

35. (currently amended) The method of claim 4- 4, wherein at least certain of the 
first, second or third packets comprise link layer packets. 

36. (currently amended) The method of claim 4- 4, wherein at least certain of the 
first, second or third packets comprise network layer packets. 

37. (currently amended) The method of claim 4- 4, wherein at least certain of the 
first, second or third packets comprise IP packets. 

38. (currently amended) The method of claim 4- 4, wherein at least certain of the 
first, second or third packets comprise transport layer packets. 

39. (currently amended) The method of claim 4- 4, wherein at least certain of the 
first, second or third packets comprise IPX packets. 

40. (currently amended) The method of claim 4-4, wherein at least certain of the 
packets sent by the computing system comprise broadcast packets having a predetermined 
address that are directed to a first predetermined port. 

41. (currently amended) The method of claim 4 4, wherein at least certain of the 
packets sent by the PLD system comprise packets having a predetermined source address 
that are directed to a second first predetermined port. 

42. (original) The method of claim I, wherein the PLD system does not 
implement a TCP/IP stack. 

43. (original) The method of claim 1, wherein the PLD system comprises an 

FPGA. 

44. (original) The method of claim 1, wherein the PLD system comprises an 
Internet security system. 
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45. (original) The method of claim 44, wherein the Internet security system 
comprises a firewall system. 

46. (currently amended) The method of claim + 4 t wherein the PLD system 
comprises a device selected from the group consisting of a PDA, a mobile telephone, a 
portable computer, a game system, a household appliance, a video recording system and a 
paging device. 

47. (currently amended) The method of claim 4- 4, wherein the PLD system 
transmits packets containing information identifying the one or more commands m 
aooordanco with th e protocol to which the PLD system respond s, wherein the information 
is transmitted at least in part in the form of compriooo XML code. 

48. (currently amended) The method of claim 4- 4, wherein the PLD system 
includes a first logic unit that processes packets sent by the computing system, wherein 
the first logic unit identifies one or more commands in the packets sent by the computing 
system. 

49. (currently amended) The method of claim ±48, wherein the PLD system 
includes one or more second logic units coupled to the first logic unit that carries out one 
or more operations that correspond to the one or more commands. 

50. (original) The method of claim 49, wherein the PLD system includes one or 
more third logic units, wherein the third logic units carry out one or more logic operations 
that correspond to packets that the PLD system transmits to the computing system. 

51. (currently amended) The method of claim 4- 4, wherein the PLD system 
includes first and second logic portions, wherein a the first logic portion operates to 
communicate packets in accordance with the a protocol with the computing system, 
wherein the second logic portion operates to carry out a process that does not comprise 
communicating packets in accordance with the protocol with the computing system. 

52. (currently amended) The method of claim 4, wherein the computing system 
operates in response to software that is transmitted to the computing system from the 
PLD system. 
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53. (currently amended) The method of claim i 4, wherein the computing system 
operates in response to software that is stored in a location identified by a packet from the 
PLD system. 

54. (original) The method of claim 53, wherein the location comprises a storage 
location on a second network coupled to the computing system. 

55. (original) The method of claim 54, wherein the location is identified by a 
network address or URL. 

56. (original) The method of claim 53, wherein the location is determined from 
an identifier for the PLD system. 

57. (currently amended) The method of claim 4- 4, wherein, after the PLD system 
operates in accordance with the first configuration data, in response to the a user input the 
PLD system reconfigures to operate to receive packets in accordance with the on e or 
more commands and no long e r oporat e o in accordanc e with the first configuration data, 
wh e r e in, aft e r loading of tho G e cond conf i guration data, tho PLD system operates in 
accordance with the second configuration data and no long e r op e rate s to r e c e iv e packets 
in accordanc e with tho one or moro commands . 

58. (original) The method of claim 1, wherein the PLD system comprises 
programmable logic having at least a first logic portion and a second logic portion, 
wherein, in response to loading of the second configuration data, the second logic portion 
is reconfigured and the first logic portion is not reconfigured. 
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